$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/c3549815-27d5-353e-87f6-2ad7769f7dea.roa File: c3549815-27d5-353e-87f6-2ad7769f7dea.roa (raw, json) Hash identifier: Ds/qZu08VX979ojN6UWZwcJOjq7eOi8/CaTgaHourcI= Subject key identifier: 2D:D3:34:FD:9A:3C:8D:ED:A2:93:91:20:2A:93:88:7F:ED:85:4F:D7 Certificate issuer: /CN=b3b07b0c-a30d-4cac-9123-4d459839ea53 Certificate serial: 010D0C9F4328584B7DECAF7FEDFDC0C779F366C0 Authority key identifier: 59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/c3549815-27d5-353e-87f6-2ad7769f7dea.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 165.1.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:af:7f:ed:fd:c0:c7:79:f3:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b07b0c-a30d-4cac-9123-4d459839ea53 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=ec13fbbc-958b-4570-a539-74e2575cbe47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:74:da:57:c1:08:5f:64:34:f7:92:34:1e:6c: 01:ed:0e:8b:a0:91:fd:04:6b:7e:dc:4d:7b:2a:fb: 30:09:cf:8b:33:44:0d:56:d0:ae:df:fb:77:53:5e: 35:11:08:49:93:4f:42:42:33:c3:68:3b:46:c9:21: b8:ef:2e:eb:5c:1c:55:24:21:6d:26:60:60:db:f8: e0:f6:50:01:7c:77:60:ff:e3:64:21:2e:38:9f:57: e5:4d:51:72:f8:ad:73:57:20:cd:9c:0c:ba:9a:1f: 8a:30:8a:fd:f3:06:f1:34:9b:4a:fb:79:fa:10:4a: 28:19:4a:c6:4a:64:e4:68:24:a6:6c:e7:c7:3a:40: 33:37:9e:30:4e:c6:e6:07:79:7f:67:f1:d7:65:62: 4f:60:92:08:3c:71:05:3b:1e:87:8a:c3:a5:1a:a2: f5:4b:91:29:99:b7:d4:c2:73:7a:4a:b0:86:ad:ce: 31:48:11:aa:03:1d:36:9f:50:78:46:95:e1:ca:05: 51:c5:b7:8e:34:c9:93:e9:af:28:0a:79:4c:ca:de: cd:33:61:36:52:70:29:dc:bc:41:c0:80:69:58:3f: 28:73:29:32:4d:35:ce:3a:48:19:db:30:4e:9a:9a: ac:d1:d7:7d:b2:0c:ed:4d:d1:f5:e8:5f:c1:77:bc: 2c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D3:34:FD:9A:3C:8D:ED:A2:93:91:20:2A:93:88:7F:ED:85:4F:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/c3549815-27d5-353e-87f6-2ad7769f7dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl X509v3 Authority Key Identifier: keyid:59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer sbgp-ipAddrBlock: critical IPv4: 165.1.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:3e:6c:98:9b:65:13:c3:33:9d:8e:8d:5e:b5:b5:16:67:fb: e8:1c:b7:ad:03:dd:be:df:81:5c:72:43:ef:d6:49:79:15:8b: f5:ac:89:c6:ea:8d:1d:01:3c:3a:fa:01:dc:ec:00:34:6e:76: ae:f2:84:b2:e6:2d:b5:df:eb:20:3f:7b:cc:58:a8:e6:d4:5e: 74:f5:85:95:2b:b1:b9:7d:41:1f:f2:17:82:c9:94:94:09:7c: a3:8b:f0:27:20:e0:fa:38:a5:12:85:70:29:ea:38:e4:8e:94: a2:80:df:de:11:fe:93:ed:1b:89:72:38:09:c8:44:9b:41:36: 36:7b:98:b6:1d:74:4b:ed:4b:34:56:1d:4d:af:a5:57:5f:8e: 80:c1:bb:5b:86:7f:30:6d:b3:6b:f1:72:7a:d9:0f:6e:29:d5: 2f:43:1e:44:fc:32:da:6d:7f:ed:9f:4a:6d:07:67:ce:c3:6f: f2:ec:b6:62:dd:cb:75:bf:01:4e:c8:ed:74:35:3f:61:45:8f: fa:37:11:5b:3f:32:68:92:85:07:64:c1:5f:28:d0:99:70:08: 20:90:ca:f3:e5:a7:92:39:e8:cd:3e:a8:90:94:bd:cf:57:29: b0:d5:ef:97:25:f5:6d:6b:1b:08:f7:88:8e:0d:79:37:5b:98: b2:bf:75:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97K9/7f3Ax3nzZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjNiMDdiMGMtYTMwZC00Y2FjLTkxMjMtNGQ0NTk4Mzll YTUzMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZWMxM2ZiYmMtOTU4Yi00NTcwLWE1MzktNzRlMjU3NWNiZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3TaV8EIX2Q095I0HmwB7Q6LoJH9BGt+3E17 KvswCc+LM0QNVtCu3/t3U141EQhJk09CQjPDaDtGySG47y7rXBxVJCFtJmBg2/jg 9lABfHdg/+NkIS44n1flTVFy+K1zVyDNnAy6mh+KMIr98wbxNJtK+3n6EEooGUrG SmTkaCSmbOfHOkAzN54wTsbmB3l/Z/HXZWJPYJIIPHEFOx6HisOlGqL1S5EpmbfU wnN6SrCGrc4xSBGqAx02n1B4RpXhygVRxbeONMmT6a8oCnlMyt7NM2E2UnAp3LxB wIBpWD8ocykyTTXOOkgZ2zBOmpqs0dd9sgztTdH16F/Bd7wszQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3TNP2aPI3topORICqTiH/thU/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iM2Iw N2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1OTgzOWVhNTMvYzM1NDk4MTUtMjdkNS0z NTNlLTg3ZjYtMmFkNzc2OWY3ZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjNiMDdiMGMtYTMwZC00Y2FjLTkx MjMtNGQ0NTk4MzllYTUzL2IzYjA3YjBjLWEzMGQtNGNhYy05MTIzLTRkNDU5ODM5 ZWE1My5jcmwwHwYDVR0jBBgwFoAUWSTnNMDpGiu4drcJNh98f3c3It8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iM2IwN2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1 OTgzOWVhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpQEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0+bJibZRPDM52OjV61tRZn++gct60D3b7fgVxyQ+/WSXkVi/Wsicbq jR0BPDr6AdzsADRudq7yhLLmLbXf6yA/e8xYqObUXnT1hZUrsbl9QR/yF4LJlJQJ fKOL8Ccg4Po4pRKFcCnqOOSOlKKA394R/pPtG4lyOAnIRJtBNjZ7mLYddEvtSzRW HU2vpVdfjoDBu1uGfzBts2vxcnrZD24p1S9DHkT8Mtptf+2fSm0HZ87Db/LstmLd y3W/AU7I7XQ1P2FFj/o3EVs/MmiShQdkwV8o0JlwCCCQyvPlp5I56M0+qJCUvc9X KbDV75cl9W1rGwj3iI4NeTdbmLK/dco= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:53 2025 by rpki-client